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WHAT IS CLAIMED IS: 

1. A method for managing user information in a database directory, 

comprising: 

organizing the user information according to attribute values assigned 
to the information; 

5 specifying the organized user information into at least one arbitrary 

group of users; and 

managing the user information associated with the at least one arbitrary 

group of users, 

2. The method according to claim 1, wherein the specifying of the at 
10 least one arbitrary group of users comprises using the attribute values as criteria for 

forming the at least one arbitrary group of users. 

3. The method according to claim 1, wherein the specifying of the at 
least one arbitrary group of users comprises using combinations of possible attribute 
values as criteria for forming the at least one arbitrary group of users. 

15 4. The method according to claim 1, wherein the specifying of the at 

least one arbitrary group of users comprises constructing a query rule to query the 
database directory, wherein the query rule defines the users within the at least one 
arbitrary group of users. 

5. The method according to claim 1, wherein user data that satisfies 
20 the query rule dynamically becomes a managed user within the at least one arbitrary 

group of users. 

6. The method according to claim 1, wherein the managing of user 
information comprises dynamically determining in real-time whether the information 
is a member in the at least one arbitrary group of users. 
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7. A method for managing user information associated with a user 
community, comprising: 

specifying the user community into at least one arbitrary group of 

users; 

5 forming an administrative domain from the at least one arbitrary group 

of users; and 

granting administrative privileges for managing the administrative 

domain. 

8. The method according to claim 7, wherein the specifying of the user 
10 community into the at least one arbitrary group of users comprises using attribute 

values associated with each of the users in the user community as criteria for forming 
the at least one arbitrary group of users. 

9. The method according to claim 7, wherein the specifying of the user 
community into the at least one arbitrary group of users comprises using combinations 

15 of possible attribute values associated with each of the users in the user community as 
criteria for forming the at feast one arbitrary group of users, 

10. The method according to claim 7, wherein the specifying of the 
user community into the at least one arbitrary group of users comprises Constructing a 
query rule to define users within the at least one arbitrary group of users. 



20 



J I. The method according to claim 10, wherein the user data that 
satisfies the query rule dynamically becomes a managed user within the administrative 
domain. 
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12. The method according to claim 7, further comprising forming an 
administrative sub domain from the administrative domain. 



13. The method according to claim 12, wherein the forming of the 
administrative sub-domain further comprises specifying al least one arbitrary group of 

5 users. 

14. The method according to claim 12, further comprising granting 
administrative pnvi leges for managing the administrative sub-domain. 

15. The method according to claim 14, further comprising delegating 
the granted administrative privileges for the administrative sub-domain. 

10 16. The method according to claim 7, further comprising delegating 

the granted administrative privileges for the administrative domain. 

17. A method for providing delegated administration of a user 
community, comprising: 

specifying the user community into at least one arbitrary group of 

15 users; 

forming an administrative domain from the at least one arbitrary group 

of users; 

granting administrative privileges to an administrator for the 
administrative domain; and 

20 delegating the granted administrative privileges from the administrator 

to another administrator lor the administrative domain. 
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18. The method according to claim 17, wherein the specifying of the 
user community into the at least one arbitrary group of users comprises using attribute 
values associated with each of the users in the user community as criteria for forming 
the at least one arbitrary group of users. 

5 19. The method according to claim 17, wherein the specifying of the 

user community into the at least one arbitrary group of users comprises using 
combinations of possible attribute values associated with each of the users in the user 
community as criteria for forming the at least one arbitrary group of users. 

20, The method according to claim 17, wherein the specifying of the 
10 user community into the at least one arbitrary group of users comprises constructing a 

query rule to define the users within the at least one arbitrary group of users. 

21. The method according to claim 20, wherein user data that satisfies 
the query rule dynamically becomes a managed user within the at least one arbitrary 
group of users 

15 22. The method according to claim 17, further comprising delegating 

the granted administrative privileges to additional administrators for the 
administrative domain. 

23. The method according to claim '17, further comprising managing 
information associated with the administrative domain according to the delegated 

20 administrative privileges, wherein the managing of the information comprises 
dynamically determining in real-time whether the information is a member in the at 
least one arbitrary group of users. 

24. A method for providing delegated administration of a user 
community with a client system, comprising: 
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specifying the user community into at least one arbitrary group of 

users; 

forming an administrative domain from the at least one arbitrary group 

of users; 

5 granting administrative privileges to an administrator for the 

administrative domain; 

forming an administrative sub-domain from the administrative domain; 

and 

delegating the granted administrative privileges from the administrator 
10 to another administrator for the administrative sub-domain. 

25. The method according to claim 24, wherein the specifying of the 
user community into the at least one arbitrary group of users comprises using attribute 
values associated with each of the users in the user community as criteria for forming 
the at least one arbitrary group of users. 

15 26. The method according to claim 24, wherein the specifying of the 

user community into the at least one arbitrary group of users comprises using 
combinations of possible attribute values associated with each of the users in the user 
community as criteria for forming the at least one arbitrary group of users. 

27. A method for enabling an administrator to control administration 
20 of a user community, comprising: 



providing user information associated with the user community to the 

admi nistrator; 
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prompting the administrator to specify the user community into at least 
one arbitrary group of users; 

prompting the administrator lo form an administrative domain from the 
at least one arbitrary group of users; 

prompting the administrator to define administrative privileges for the 
administrative domain; and 

using the administrative domain and administrative privileges defined 
by the administrator to control administration of the user community. 

28. The method according to claim 27, wherein the prompting of the 
administrator to specify the at least one arbitrary group of users comprises prompting 
the administrator to use attribute values associated with each of the users in the user 
community as criteria for forming the at least one arbitrary group of users. 

29. The method according to claim 27, wherein the prompting of the 
administrator to specify the at least one arbitrary group of users comprises prompting 
the administrator to use combinations of possible attribute values associated with each 
of the users in the user community as criteria for forming the at least one arbitrary 
group of users. 

30. The method according to claim 27, wherein the prompting of the 
administrator to specify the at least one arbitrary group of users comprises prompting 
the administrator to construct a query rule to specify the at least one arbitrary group of 
users. 

3 1 The method according to claim 30. wherein user data that satisfies 
the query rule dynamically becomes a managed user within ihe at least one group of 
users. 
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32. The method according to claim 27, further comprising prompting 
the administrator to form an administrative sub-domain from the administrative 
domain. 



33. The method according to claim 32, further comprising prompting 
5 the administrator to grant administrative privileges for managing the administrative 
sub domain to another administrator. 



34. The method according to claim 33, further comprising prompting 
the administrator of the sub-domain to delegate the -ranted administrative privileges. 



35. A user community administration tool for managing user 
10 information associated with a user community, comprising: 

a user group specifying component that specifies the user community 
into at Least one arbitrary group of users; 

a domain formation component that forms an administrative domain 
from the at least one arbitrary group of users; 



15 an administrative privileges component that grants administrative 

privileges for the administrative domain; and 

an information management component that manages information 
associated with the administrative domain in accordance with the granted 
adn \\ n i s t rat i ve pri vi leges. 



36. The tool according to claim 35, wherein the domain formation 
component forms an administrative sub-domain from the administrative domain. 
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37. The tool according to claim 36, wherein the administrative 
privileges component delegates the administrative privileges for the administrative 
sub-domain. 

38. The tool according to claim 35, wherein the administrative 
5 privileges component delegates the granted administrative privileges for the 

administrative domain. 

39. The tool according to claim 35, wherein the user group specifying 
component uses attribute values associated with each of the users in the user 
community as criteria- for specifying the at least one arbitrary group of users. 

10 40. The tool according to claim 35, wherein the user group specifying 

component uses combinations of possible attribute values associated with each of the 
users m the user community as criteria for specifying the at least one arbitrary group 
of users. 

41. The tool according to claim 35, wherein the user group specifying 
15 component specifies the at least one arbitrary group of users from a query rule. 

42. The tool according to claim 41, wherein user data that satisfies the 
query rule dynamically becomes a managed user within the at least one arbitrary group 
of users. 

43. The tool according to claim 35, wherein the information 
20 management component dynamically determines in real-time whether the information 

is a member in the at least one arbitrary group of users. 

44. A system for managing user information associated with a user 
community, comprising: 
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a database directory containing a plurality of user information; 

a user community administration tool to manage the plurality of user 
information in the database directory; the user community administration tool 
comprising a user group specifying component that specifies the user community into 
5 at least one arbitrary group of users; a domain formation component that forms an 
administrative domain from the at least one arbitrary group of users; an administrative 
privi leges component that grants administrative privileges for the administrative 
domain; and an information management component that manages information 
associated with the administrative domain in accordance with the granted 
10 administrative privileges; and 

a first computing unit configured to serve the user community 
administration tool and the database directory. 

45. The system according to claim 44, further comprising a second 
computing unit configured to execute the user community administration tool served 

15 from the first computing unit over a network. 

46. The system according to claim 44, wherein the user group 
specifying component uses attribute values associated with each of the users in the 
user community as criteria for specifying the at least one arbitrary group of users. 

47. The system according to claim 44, wherein the user group 
20 specifying component uses combinations of possible attribute values associated with 

each of the users in the user community as criteria for specifying the at least one 
arbitrary group of users. 

48. The system according to claim 44, wherein the user group 
specifying component specifies the at least one arbitrary group of users from a query 

25 rule that queries the database directory. 
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49. The system according to claim 48, wherein user data that satisfies 
the query rule dynamically becomes a managed within the at least one arbitrary group 
of users. 

50. A user community administration tool for providing delegated 
5 administration of a user community, comprising: 

means for specifying the user community into at least one arbitrary 

group of users; 

means for forming an administrative domain from the at least one 
arbitrary group of users; 

10 means for granting administrative privileges to an. administrator for the 

administrative domain; and 

means for delegating the granted administrative privileges from the 
administrator to another administrator for the administrative domain. 

51. The tool according to claim 50 f wherein the specifying means uses 
15 attribute values associated with each of the users in the user community as criteria for 

specifying the at least one arbitrary group of users. 

52. The tool according to claim 50, wherein the specifying means uses 
combinations of possible attribute values associated with each of the users in the user 
community as criteria for specifying the at least one arbitrary group of users. 

20 53. The tool according to claim 50, wherein the specifying means 

specifies the at least one arbitrary group of users from a query rule. 
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54. The tool according to claim 53, wherein user data that satisfies the 
query rule dynamically becomes a managed within the at least one arbitrary group of 
users. 

55. A computer-readable medium storing computer instructions for 
5 instructing a computer system to provide delegated administration of a user 

community, the computer instructions comprising: 

specifying the user community into at least one arbitrary group of 

users; 

forming an administrative domain from the at least one arbitrary group 

10 of users; 

granting administrative privileges to an administrator for the 
administrative domain; and 

delegating the granted administrative privileges from the administrator 
to another administrator for the administrative domain. 

15 56. The computer-readable medium according to claim 55 T wherein 

the specifying of the user community into the at least one arbitrary group of users 
comprises instructions for using attribute values associated with each of the users in 
the user community as criteria for forming the at least one arbitrary group of users. 

57. The computer- readable medium according to claim 55, wherein 
20 the specifying of the user community into the at least one arbitrary group of users 
comprises instructions for using combinations of possible attribute values associated 
with each of the users in the user community as criteria for forming the at least one 
arbitrary group of users. 
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58. The computet -readable medium according to claim 55, wherein 
the specifying of the user commimily into the at least one arbitrary group of users 
comprises instructions for constructing a query rule to define the users within the at 
least one arbitrary group of users. 

5 59. The computer-readable medium according to claim 58 T wherein 

user data that satisfies the query rule dynamically becomes a managed user within the 
at least one arbitrary group of users 

60. The computer-readable medium according to claim 55, further 
comprising instructions for managing information associated with the administrative 

10 domain according to the delegated administrative privileges. 

61. The computer-readable medium according to claim 55, further 
comprising delegating the granted administrative privileges to additional 
administrators for the administrative domain. 

62. A computer readable medium storing computer instructions for 
1 5 instructing a computer system to enable an administrator to control administration of a 

user community, the computer instructions comprising: 

providing user information associated with the user community to the 

administrator; 

prompting the administrator to specify the user community into at least 
20 one arbitrary group of users; 

prompting the administrator to form an administrative domain from the 
at least one arbitrary group of users; 
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prompting the administrator to define admi ni strati ve privileges for the 
administrative domain; and 

using the administrative domain and administrative privileges defined 
by the administrator to control administration of the user community. 

5 63. The computer-readable medium according to claim 62, wherein 

the prompting of the administrator to specify the at least one arbitrary group of users 
comprises instructions for prompting the administrator to use attribute values 
associated with each of the users in the user community as criteria for forming the at 
least one arbitrary group of users. 

10 64. The computer-readable medium according to claim 62, wherein 

the prompting of the administrator to specify the at least one arbitrary group of users 
comprises instructions for prompting the administrator to use combinations of 
possible attribute values associated with each ol the users in the user community as 
criteria for forming the at least one arbitrary group of users. 

15 65. The computer-readable medium according to claim 62. wherein 

the prompting of the administrator to specify the at least one arbitrary group of users 
comprises instructions for prompting the administrator to construct a query rule to 
specify the at least one arbitrary group of users. 

66. The computer-readable medium according to claim 65, wherein 
20 user data that satisfies the query rule dynamically becomes a managed user within the 

at least one group of users. 

67. The computer- readable medium according to claim 62, further 
comprising instructions for prompting the administrator to form an administrative 
sub-domain from ihe administrative domain. 
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68. The computer-readable medium according to claim 67, further 
comprising instructions for prompting the administrator 10 grant administrative 
privileges for managing the administrative sub-domain to another administrator. 

69. The computer-readable medium according to claim 68, further 
comprising instructions lor prompting the administrator of the sub-domain to delegate 
the granted administrative privileges. 
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